CVE-2024-10515

LOW

3.5

Description

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

CVE Details

CVSS v3.1 Score3.5

SeverityLOW

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredHIGH

User InteractionREQUIRED

Published11/20/2024

Last Modified3/31/2025

Sourcenvd

Honeypot Sightings0

Affected Products

squirrly:seo_plugin_by_squirrly_seo

Weaknesses (CWE)

CWE-79

References

https://wpscan.com/vulnerability/367aad17-fbb5-48eb-8829-5d3513098d02/(contact@wpscan.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.